You can get this to be a bit more readable if you can load in the MIB.
$ cp manufacturer.mib $ZENHOME/share/mibs/site
$ zenmib run
Of course, we haven't had a lot of success with manufacturer mibs
compiling very well, but it really makes the events a lot easier to
transform. The latest code does some dependency analysis with helps a lot.
You can put in as much code as you like into the transform, and add
additional properties to the event, which will become event details.
You can see the event details by clicking on the last column of an
event. Here's a complex example:
# save some typing
x='1.3.6.1.4.1.23.2.10.1.'
# pull the event data out into a readable message
evt.summary = '%s has logged in to %s' % (getattr(evt, x+'49'),
device.getId())
# save the connection number (why... I don't know, it's just an example)
evt.connectionNumber = gettattr(evt, x+'8')
You can test for the proper event type by testing if evt has a property
in the Rule section:
hasattr(evt, '1.3.6.1.4.1.23.2.10.0.230')
Does that makes sense? I would love to do one of those screen capture
movies of this in action, it's really quite nice. You can turn these
ugly little traps into nice messages and get them sorted/prioritized and
archived very quickly.
-Eric
Eric Belcher wrote:
Hi,
Starting to explore ZENOSS a little more with regard to traps. I've
been mapping unknowns to sensible events. However, the source of my snmp
information http://www.excsoftware.com indicates that I can get much
more information if I wanted to.
For example, The OID 1.3.6.1.4.1.23.2.10.0.230 maps to a user login.
This I have setup as follows in the Transform section of the Event in
ZENOSS.
evt.summary = getattr(evt, "1.3.6.1.4.1.23.2.10.0.230", "A User has
Logged In") + " to device " + device.getId()
Using the information below, how might I also get the time, username
etc.
Novell: A user has logged in. serverName(1.3.6.1.4.1.23.2.10.1.39)=%1,
trapTime(1.3.6.1.4.1.23.2.10.1.44)=%2,
userName(1.3.6.1.4.1.23.2.10.1.49)=%3,
connectionNumber(1.3.6.1.4.1.23.2.10.1.8)=%4,
[NetWare-Server-Alarm-MIB.loginConnection=1.3.6.1.4.1.23.2.10.0.230]
Would be grateful if anyone has any ideas.
Thanks
Eric.
Disclaimer
--------------------------------------------
This email is intended for the use of the
named individual or entity and may contain
confidential and privileged information.
Any dissemination distribution or copying
by anyone other than the intended recipient
of this email is strictly prohibited.
If this email has been received in error,
please send an email in response, or
telephone us immediately on +61 7 38962200,
and destroy the original message. Any views
expressed in this message are those of the
individual sender, except where the sender
specifically states them to be the views of
the Corporation of the Synod of the Diocese
of Brisbane or Churchie.
------------------------------------------------------------------------
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users
